This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137322e302f32342d3234203d3e203232353431.roa
File:                     3230302e37352e3137322e302f32342d3234203d3e203232353431.roa (raw, json)
Hash identifier:          txWT/XWYSR1UQJAgOyPbJADU/93WiYailzRZapUWZWc=
Subject key identifier:   F2:DE:C5:61:B2:CA:0C:C0:0F:AD:A8:EC:68:A5:53:62:3F:2F:0A:E3
Certificate issuer:       /CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
Certificate serial:       4EB7B4F69DA8CAFD006C6C97AFF8629A84EEABA8
Authority key identifier: 62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137322e302f32342d3234203d3e203232353431.roa
Signing time:             Tue 06 Jan 2026 20:50:46 +0000
ROA not before:           Tue 06 Jan 2026 20:45:46 +0000
ROA not after:            Tue 05 Jan 2027 20:50:46 +0000
asID:                     22541
IP address blocks:        200.75.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 29 Jan 2026 16:35:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b7:b4:f6:9d:a8:ca:fd:00:6c:6c:97:af:f8:62:9a:84:ee:ab:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D
        Validity
            Not Before: Jan  6 20:45:46 2026 GMT
            Not After : Jan  5 20:50:46 2027 GMT
        Subject: CN=F2DEC561B2CA0CC00FADA8EC68A553623F2F0AE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a0:e4:6e:db:c8:de:d2:ce:89:c2:04:4e:6b:
                    35:a3:22:ee:d0:85:d9:b4:23:85:d6:3c:ef:3c:a0:
                    0a:58:60:de:c0:c6:55:48:fb:ce:d4:94:25:8f:7f:
                    77:ea:3d:6b:b9:23:90:f1:b3:87:d9:44:30:33:7b:
                    09:cf:fe:3b:ce:48:3f:68:9b:81:77:e9:69:e4:ca:
                    ff:40:ab:42:64:4d:95:ee:d6:a6:5c:78:bd:4b:99:
                    e6:6d:05:1e:8e:ee:1c:e5:59:e2:68:33:67:99:7b:
                    b9:b0:dc:72:5f:c3:24:13:73:46:e0:09:c6:7f:ed:
                    41:17:09:4d:e1:0f:d2:9d:7b:b4:3e:a2:03:62:34:
                    84:af:d4:d1:45:74:31:a9:ef:4f:2c:da:61:b6:c8:
                    98:d2:4a:a8:1c:36:26:e7:4d:ac:0b:59:45:3f:6f:
                    34:73:37:70:a7:e6:2e:80:ff:8d:94:79:04:35:a1:
                    9a:1d:6f:e8:c5:a7:28:4f:2b:f8:c7:01:e0:dc:f5:
                    f4:df:56:0f:d4:8d:01:fe:02:c5:ab:2e:cb:54:d5:
                    75:8e:7a:a7:3b:1b:11:3a:a6:b0:65:05:5b:b6:81:
                    88:17:9d:fe:f3:2e:70:0d:79:7a:17:58:15:8b:59:
                    dd:02:ed:47:5f:77:29:da:e2:1f:c9:b4:76:f6:e7:
                    39:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DE:C5:61:B2:CA:0C:C0:0F:AD:A8:EC:68:A5:53:62:3F:2F:0A:E3
            X509v3 Authority Key Identifier:
                keyid:62:0D:1F:DB:BD:45:7C:A0:F9:CC:FC:63:A8:B8:5C:99:A8:19:AF:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620D1FDBBD457CA0F9CCFC63A8B85C99A819AF3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1FA039B9EAF13ADE817882DD4BBFFA2BE1D491764BF9383ECEE908BD23F4CF0/0/3230302e37352e3137322e302f32342d3234203d3e203232353431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.75.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:c6:df:db:ac:26:26:e0:87:73:de:e1:0d:c5:b1:e4:3d:07:
         b2:a9:26:95:a6:87:e0:87:3c:3a:36:71:a5:9e:73:c8:c0:48:
         6e:82:30:0c:77:53:9e:60:d0:79:0d:ac:a2:7b:04:bf:50:28:
         04:bc:31:19:72:14:2c:f9:82:f2:ca:cd:e1:b8:86:fd:82:69:
         03:32:2a:f2:0f:a3:e4:2c:d1:83:42:74:1e:59:f7:5f:e6:40:
         e7:89:97:bc:7e:9d:f4:76:e1:32:de:94:b6:a8:f4:71:35:ad:
         a0:08:a6:2a:06:24:1d:75:b4:8d:ec:cd:d5:c4:fe:76:02:4d:
         a4:dd:6d:4d:f5:36:32:bf:e4:2c:5d:5b:92:78:bf:ef:c3:31:
         1a:65:c1:7f:52:8b:6c:b2:ea:97:52:72:68:5a:2d:11:b3:d2:
         5d:53:4f:ad:d0:88:ec:50:69:3a:43:44:e7:90:06:e2:4e:4c:
         91:0e:fc:2e:90:b2:56:f4:c6:b6:0a:94:f3:34:1a:cb:25:49:
         4a:5f:5b:50:73:62:ac:4f:d6:8a:66:7a:59:9c:6b:12:29:b8:
         71:54:c2:85:7e:8b:48:93:43:ae:ec:97:8f:4d:cf:80:85:28:
         5c:a0:de:0a:d2:14:1e:e1:0c:dc:d5:9f:26:36:48:ea:83:e2:
         06:7b:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:29 2026 by rpki-client